So i want to create a vpn beetween two office (office A et office B).
It already works.
But only the office A can acces to office B, Office B cannot acces office A.
What's the best way to do it ?
So here is my command to create the tunnel:
generate vpn openvpn-key /config/auth/secretClient
sudo scp /config/auth/secretClient ubnt@ippublicB:/config/auth/secretClient
configure
set interfaces openvpn vtunX
set interfaces openvpn vtunX mode site-to-site
set interfaces openvpn vtunX local-port 119X
set interfaces openvpn vtunX remote-port 119X
set interfaces openvpn vtunX local-address 10.99.X.1
set interfaces openvpn vtunX remote-address 10.99.X.2
set interfaces openvpn vtunX remote-host ippublicA
set interfaces openvpn vtunX shared-secret-key-file /config/auth/secretClient
set interfaces openvpn vtunX openvpn-option "--comp-lzo"
set interfaces openvpn vtunX openvpn-option "--float"
set interfaces openvpn vtunX openvpn-option "--ping 10"
set interfaces openvpn vtunX openvpn-option "--ping-restart 20"
set interfaces openvpn vtunX openvpn-option "--ping-timer-rem"
set interfaces openvpn vtunX openvpn-option "--persist-tun"
set interfaces openvpn vtunX openvpn-option "--persist-key"
set interfaces openvpn vtunX openvpn-option "--user nobody"
set interfaces openvpn vtunX openvpn-option "--group nogroup"
set protocols static interface-route subnetA next-hop-interface vtunX
commit
save
exit
configure
set interfaces openvpn vtunX
set interfaces openvpn vtunX mode site-to-site
set interfaces openvpn vtunX local-port 119X
set interfaces openvpn vtunX remote-port 119X
set interfaces openvpn vtunX local-address 10.99.X.2
set interfaces openvpn vtunX remote-address 10.99.X.1
set interfaces openvpn vtunX remote-host ippublicB
set interfaces openvpn vtunX shared-secret-key-file /config/auth/secretClient
set interfaces openvpn vtunX openvpn-option "--comp-lzo"
set interfaces openvpn vtunX openvpn-option "--float"
set interfaces openvpn vtunX openvpn-option "--ping 10"
set interfaces openvpn vtunX openvpn-option "--ping-restart 20"
set interfaces openvpn vtunX openvpn-option "--ping-timer-rem"
set interfaces openvpn vtunX openvpn-option "--persist-tun"
set interfaces openvpn vtunX openvpn-option "--persist-key"
set interfaces openvpn vtunX openvpn-option "--user nobody"
set interfaces openvpn vtunX openvpn-option "--group nogroup"
set protocols static interface-route subnetB next-hop-interface vtunX
commit
save
exit